Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: Bug#970880: Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-12 Thread Spencer Olson
On Tue, Oct 12, 2021 at 2:17 PM Timo Aaltonen wrote: > > On 12.10.2021 20.48, Spencer Olson wrote: > > On Tue, Oct 12, 2021 at 9:53 AM Spencer Olson wrote: > >> > >> On Sun, Oct 10, 2021 at 12:58 PM Timo Aaltonen wrote: > >>> > >>>> >

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-12 Thread Spencer Olson
On Tue, Oct 12, 2021 at 9:53 AM Spencer Olson wrote: > > On Sun, Oct 10, 2021 at 12:58 PM Timo Aaltonen wrote: > > > > > > > > > > > Maybe the CI will finish before I can get back to my testing. > > > > And it did, this error is fixed now :)

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-12 Thread Spencer Olson
On Sun, Oct 10, 2021 at 12:58 PM Timo Aaltonen wrote: > > > > > > > Maybe the CI will finish before I can get back to my testing. > > And it did, this error is fixed now :) > > But it fails later on, so there's some work still to catch up with the > current distro, but at least this particular

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-10 Thread Spencer Olson
On Sun, Oct 10, 2021, 10:38 Timo Aaltonen wrote: > On 10.10.2021 18.41, Spencer Olson wrote: > > Did some more investigation. I downloaded the packages that are being > > used on centos stream 8. First I tried my test code with their version > > of libssl3.so preloaded:

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-10 Thread Spencer Olson
which the "libcurl.so.x.x" lib belongs to. I think that the libcurl-gnutls package might do the same thing. My next step will be do rebuild freeipa and certmonger with the libcurl-openssl-dev package in place instead of the libcurl-nss-dev and then try reinstalling. On Sat, Oct

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-09 Thread Spencer Olson
ked hard at all the upstream changes (or tried to bisect the upstream repo yet). On Sat, Oct 9, 2021 at 12:05 PM Spencer Olson wrote: > > Since it doesn't look like any progress has been made on this, I've > started to work through some debugging. > > Right now, it looks like the p

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-09 Thread Spencer Olson
Since it doesn't look like any progress has been made on this, I've started to work through some debugging. Right now, it looks like the problem is probably actually due to a change in libnss3. In fact, the problem appears to be specifically in libssl3.so from the libnss3 package. The problem: